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RHMARK.S 

In response to the Final Office Action mailed on December 1, 2005, Applicant respectfully 
requests reconsideration based on the following remarks. Applicant respectfully submits that the 
claims os previously presented are in condition for allowance. 

QairnJ*cjecii^ 

Clnims 1-1, 6-10, and 12-23 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Microsoft Passport in view of U.S. Patent No. 5,966,705 issued to Koncm el 
nl. (hereinafter 'Koneru"). 

For an obviounness rejection to be proper, the Examiner must meet the burden of establishing 
th:ii nil elements of the invention arc disclosed in the prior art; that the prior art relied upon, 
coupled with knowledge generally iivaibblc in (he art at the time of the invention, must contain 
some suggestion or incentive thai would have motivated the skilled artisan to modify a reference 
or combined references; and that the proposed modification of the prior art must have had a 
reasonable expectation of success, determined from the vantage point of the skilled artisan at the 
time the invention was made. In re. Fine, 5 U.S.P.Q.2d 15%, 1 598 (Fed. Cir. 1988); In Re 
Wilson, 165 U.S.P.Q. 494, 496 (C.C.I'. A. 1970). 

This rejection is respectfully traversed because Microsoft Passport in view of Koneru docs not 
leach or suggest all oftho elements in Claims 1-4, 6-1 0, and 12-23. 

(Maim I recites "A method for providing information on a plurality of users to a plurality 
ofrequeslors over the Internet, comprising: storing information on the plurality of users in a 
database located on a cookie management system and associating the information with a 
plurality of keys; receiving a request at the cookie management system for information on a 
particular user from n requestor over the Internet; re ceiving both a usor-supp HpApassword and a 
Uy ; assnciiik'd with the req uest at the cookie management system from the requestor over the 
Internet, Ihe key associated with the request included in a cookie on a machine of the particular 
user, whureiu »w^y L w . ith mo reques t is retrieved from the m achine of the particjdar 

1n5cLJ2y._t.llQ req uestor , and wherein thcjia^PpUcjlj-^^jai is obtained Jj_m_Mp.miS»M 

,li;%S/248-'lfcf> 
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user by Lhej^ques^^ 

H»ir .ULt!iQ.«i>Jli^a!WaS^»HJv^i; using bolh tlic user-supplied password and the key 
associated with the request lo retrieve the information on the particular user from the database; 
ami forwarding Iho information on the particular user to the requestor over the Internet." 
(limphasis added.) 

In Claim I, the us<;r-supplied password is the password that a particular user chooses, while the 
keys associated with the information is the key that is associated with the user's information 
when the information is stored in a database on the cookie management system. Therefore the 
user-supplied password and the keys arc different from each other. The Hxamincr however, 
treats both the keys and the user-supplied password as the same, i.e., "Passports", Although a 
subtitle "use of cookies", on Examiner numbered page 15 of Microsoft Passport discusses the 
use of cookies, the Microsoft Passport does not teach or suggest the keys associated with the 
user's information. All the Microsoft Passport discloses is that the Passport site stores a user's 
member name, the lime the user signed in, and the user's prolilc information in a secure, 
encrypted cookie on the user's hard disk. Therefore, Microsoft Passport fails to teach or suggest 
the clement "receiving both a user-supplied password and a key associated with the request at the 
cookie management system from the requestor over the Internet", as recited in Claim 1 . 

Microsoft Passport leaches that a user creates a Passport; that the user's information is securely 
sent to the Passport site; and that the user's information stored in the Passport is transferred to 
other services when the information is in the public Profile. Microsoft Passport however, does 
not toad, or suggest how the user's information is disclosed in response lo the request and how 
both lite keys and Uw password are used by the requestor to request the user's information. 
Therefore, Microsoft- Passport fails to teach or suggest the elements "the key associated with the 
request is retrieved from the machine of the particular user by the requestor; and the user- 
supplied password is obtained from the particular user by the requestor and grants the requestor 
permission to use the information on the particular user in the cookie management system", as 
recited in Claim 1 . 

Col. 2, lines 49-52 orKoncru loach that the user is assigned a token, such as a GUID, that 
uniquely rcpicscnls the user; and that the token is used as a key to a database entry associated 
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Willi the user on the site. Col. 2, linos 60-62 of Koncru also teach that using the user 
identification as a key, only one database entry is needed to track users across both non-secure 
and secure areas. Thus, the key. as disclosed in Koncru, is only for identifying the user across 
boil, non-sccuro and secure areas, rather than for Jelling the requestor request the information. 
Koncru is also silent in associating the key with the user's information or receiving or granting 
the requestor pa mission to the user's information by using the user's password. 

Therefore, Koncru docs not leach or suggest the clement "the key associated with the request is 
rclricvcd from the machine of Ihe particular user by the requestor; and the user-supplied 
password is obtained from ihe particular user by the requestor and grants the requestor 
permission to use the information on the particular user in the cookie management system", as 
recilcd in Claim l< 

As staled above, Microsoft Passport is related to creating a Passport in response to the user's 
information. Koncru is related to hacking a user across secure and non-secure areas on a 
computer network. Thus, neither of them is related to receiving a request from a requestor, 
which is not (he user, for the user's information. Therefore, one of ordinary skill in the art at the 
time of invention by Application would not be motivated to combine Microsoft Passport with 
Konem to arrive at the subject matter recited in Claim 1. Even if Microsoft Passport is 
combined will. Koncru, the combination does not render Claim 1 obvious because it fails to 
tench or suggest at least the element "the key associated with the request is retrieved from inc 
machine of the particular user by the requestor; and the user-supplied password is obtained from 
die pai tieular user by the requestor and grants the requestor permission to use the information on 
the particular user in the cookie management system", as recited in Claim 1 , 

For at least the above reasons, Claim I is patentable over Microsoft Passport in view of Koncru. 
nccnujw they depend from Claim 1, Claims 2-4, 6-8, 14, and 21 arc also patentable over 
Microsoft Passport in view of Koncru. 

Claim 9 recites "receiving a user-supplied password from a user to the requestor website, iho 
password granling the requestor website permission to use information on the user in a cookie 
management system; sending a query over the Internet from the requestor website to the cookie 
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management system for data associated with ihc key, the query including both the key retrieved 
from ihc cookie tiro) l.hc user-supplied password"; and Claim 16 recites "a cookie management 
Nystcm for receiving a request over Ihc Internet from a requestor for information on a particular 
user, ihc request including both a user-supplied password and a key stored as part of a cookie on 
« machine of the particular user, wherein the key associated with the request is retrieved from the 
machine of ihc particular user by the requestor, and wherein the user-supplied password is 
obtained from Ihc particular user by the requestor and grants the requestor permission to use the 
information on Ihc particular user at the cookiu management system". 

Because Claims 9 and 16 include elements that are similar to Claim 1, Claims 9 and 16 
are patentable over Microsoft Passport in view of Koncru for at least the same reasons that Claim 
I is patent nblo over Microsoft Passport in view of Koneni. Because they depend from Claim 9, 
Claims 1 0, 1 2-15, and 22 are patentable over Microsoft Passport in view of Koncm for at least 
(he some reasons advanced with respect to Claim 9. Because they depend from Claim 16, 
Claims 1 7-20, a/id 23 are patentable over Microsoft Passport in view orKoncru for at least the 
same reasons advanced with respect to Claim 16. 
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Conclusion 

hi view of the foiegoing remarks, Applicant submits that the abovc-idcnlLllcd application is in 
condition for Allowance. Early notification to this effect is respectfully requested. 

If any issues remain, the Examiner is invited to contact the undersigned at the telephone number 
below. 

inhere are nay charges with respect lo this response or otherwise, please charge them to Deposit 
Account 06-1 130 maintained by Applicants' attorneys. 

Respectfully submitted, 




Anne Davis Barry 
Registration No. 47,408 
Customer No, 36192 



DMe: February 28, 2006 

Address: 55 Griffin Koad South, Bloomfield, CT 06002 
Telephone: (860) 286-2929 
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